bitsandbots / inventory Goto Github PK

Hi,

I would like to ask you how can I change the timezone. Where I live the timezone is +0 and I would like to change this.

Another thing that I was trying to solve but not succefully unfortunately is the currency. I would like to show in EUR and not in DOLLAR. I changed in includes/formatcurrency.php to EUR but nothing happend.

Can you please check this please?

Awaiting answer ;)

Best regards

Describe the bug
When searching for products by SKU, only the first item is displayed where multiple products have the same SKU. (Same product stored in different locations for example)

To Reproduce
Steps to reproduce the behavior:

1. Go to 'Add Sale by SKU'
2. Search for Product SKU: e.g. '3615001002' (Five sets of this SKU in five locations)
3. Only one item shown in list

Expected behavior
Revise 'Add Sale by SKU" to function in the same way as 'Product Search' - for example, a search on SKU in the "Product Search" page reveals all matching entries in the database.

Screenshots

Desktop (please complete the following information):

• OS: MacOS 11.0.1
• Browser Safari
• Version 14.0.1

The project was started as a development level application with simplicity and functionality being valued over security.
A thorough security and vulnerability assessment should be performed before exposing this application to any external networks.

Hi, for the past two days I've been figuring out how to sort the stock.php by date as DESC instead of ID. But I just can't figure it out.
Where can I set it so that it will sort by date DESC.

And is there also a possibility to create multiple articles with the same name?

What I now see is that he checks if the name exists, if the name exists then the article is not created.

Thanks

Is your feature request related to a problem? Please describe.

• When training users, it would be useful to be able to utilise a training dataset, with a standard front-end, rather than live system data.

Describe the solution you'd like

• Creation of an additional SQL Database for training use
• The option to select the database to use at the Login screen - for example: Live Data, Training Data, Sample Data - from a drop-down menu.The system then utilises the database selected.

Describe alternatives you've considered

• It is possible to install the system twice - to separate folders - and create separate sql databases. This then requires multiple systems to be updated should features change or develop. A single front-end with selectable datasets would ensure users are always on the latest version.

Additional context

• Additional SQL database creation required by end users - so perhaps documented as an advanced feature, or a default set of databases could be provided.

Describe the bug
Delete product leaves empty stock entries

To Reproduce
Steps to reproduce the behavior:

1. Go to 'Products'
2. Click on 'delete product'
3. Go to 'Manage Stock'
4. See error

Expected behavior
Delete product should remove corresponding stock entries, or force the user to delete the stock entries before permitted to delete product.

Screenshots

Desktop (please complete the following information):

• OS: [ Windows 10 x64 ]
• Browser [ chrome ]
• Version [ 87 ]

Smartphone (please complete the following information):

Additional context

there is a bug in the includes folder "products\edit_product.php(66): logAction('success') #1 {main} thrown in C:\xampp\htdocs\M-Inventory\includes\sql.php on line 196"

i think if we upgrade the version in php 7.

I see a login page and it's nice but what if the user or admin forgot his/her password?
so i think we should create forgot password Recovery 😄😄

Steps:
1.Create a Temporary Token Table.
2.Create a Database Connection.
3.Create an Index File (Send Email)
4.Create a Reset Password File.
5.Create additional CSS File.

Hi,

i was wondering if there is an option to add multiple serial numbers for 1 article.
So I have 1 type of notebook in the system. But i have multiple of them with different serial numbers.
Is it possible or do i have to create new products everytime ?

site wont open:

error message in apache log : PHP Parse error: syntax error, unexpected '.', expecting ',' or ';' in /var/www/https/inventory/includes/upload.php on line 16

seems that SITE ROOT DS is not defined ?

public $userPath = SITE_ROOT.DS.'..'.DS.'/uploads/users';

Describe the bug
If logged in as an administrator; if you disable the account currently logged in with, it breaks the program without recovery.

To Reproduce
Steps to reproduce the behavior:
login as admin
go to user management
edit admin user
"Deactive" admin account, select update

Expected behavior
A clear and concise description of what you expected to happen.
admin account should be disabled and user is logged out

Desktop (please complete the following information):

• OS: Mac OS
• Browser: Safari and Chrome

Additional context
Recovering from the issue requires a git reset --hard to the previous state. Unclear why the problem occurs. When attempting to login with admin again, the logs will show that the user is authenticated but the program is possibly broken somewhere around the users/home.php line 11 if (!$session->isUserLoggedIn(true)) { redirect('index.php', false);} as it constantly redirects to home.php

edit: After a bit of digging this issue might have something to do with the session cookies for the browser. I can't seem to find a reliable fix. Sometimes a git reset works, sometimes a database table flush and rebuild works.

Describe the bug
I try to import the sql file "inventory" and there's an error occur on 'logs' table

To Reproduce
Steps to reproduce the behavior:

1. Go to ->php my admin
2. Click on -> import
3. Select inventory.sql
   4.click ->GO
4. See error

Expected behavior
it should be "success importing"

Screenshots
If applicable, add screenshots to help explain your problem.

Desktop (please complete the following information):

• OS: Windows
• Browser: [chrome]
• Version [Latest]

tainted-sql-string

User data flows into this manually-constructed SQL string. User data can be safely inserted into SQL strings using prepared statements or an object-relational mapper (ORM). Manually-constructed SQL strings is a possible indicator of SQL injection, which could let an attacker steal or manipulate data from the database. Instead, use prepared statements ($mysqli->prepare("INSERT INTO test(id, label) VALUES (?, ?)");) or a safe library.

Describe the bug
Cross Site Request Forgery (CSRF) Vulnerability
(https://owasp.org/www-community/attacks/csrf)

To Reproduce
Steps to reproduce the behavior:

1. Download the login page to your local system.
2. Open the page in your web browser.
3. Login through the offline webpage.

Expected behavior
Access should be denied to forms not directly served by the application.

Desktop (please complete the following information):

• Browser [ chrome ]